Using the web we can get remote access to our Citrix servers from home. At the moment it is for all users. On one hand I'm told that I cannot be restrictive about who gets access but surely you can set a web publishing rule to say who in Active Directory gets access.